Generalized service protection systems and methods

ABSTRACT

Systems and methods for ring protection switching in a network based on selectively blocking and unblocking a port include forwarding traffic via the port over a data channel that utilizes a first service identifier, wherein the data channel is routed in the network along a closed loop; and selectively blocking and unblocking traffic on the port to provide the ring protection switching over the closed loop, wherein the selectively blocking and unblocking is performed based on a management channel that utilizes a second service identifier that is a different type from the first service identifier.

CROSS-REFERENCE TO RELATED APPLICATION(S)

The present patent/application is a continuation of U.S. patentapplication Ser. No. 13/435,225, filed Mar. 30, 2012, and entitled“GENERALIZED SERVICE PROTECTION SYSTEMS AND METHODS,” the contents ofwhich are incorporated by reference.

FIELD OF THE INVENTION

Generally, the field of art of the present disclosure pertains tonetworking systems and methods, and more particularly, to generalizedservice protection systems and methods.

BACKGROUND OF THE INVENTION

Conventionally, G.8032 Ethernet Ring Protection is an Ethernet sharedring protection technology analogous to Synchronous Optical Network(SONET) and Synchronous Digital Hierarchy (SDH) rings. Of note, G.8032is defined in ITU-T G.8032 Ethernet Ring Protection Switching (03/2010),ITU-T G.8032 Amendment 1 (06/2010), and ITU-T G.8032 Amendment 2(02/2011), the contents of each is incorporated by reference herein.With SONET/SDH rings, timeslots are used as a data plane forwardingidentifier, and with G.8032, Ethernet frame Virtual Local Area Network(VLAN) Identifier (VID) and Destination Media Access Control Address(MAC DA) are used as the data plane identifier. As specified, the G.8032protocol is applicable to bearer traffic that is based on the VIDservice space identification. Consequently, G.8032, as specified, canonly be applied to IEEE 802.1Q Media Access Control (MAC) Bridges andVirtual Bridged Local Area Networks (2003, 2005, 2008, and 2011) (oramendment [IEEE 802.1ad Provider Bridges (2005), 802.1ah ProviderBackbone Bridges (2008)]) bearer plane technologies. The contents ofIEEE 802.1Q, 802.1ad, and 802.1ah are each incorporated by referenceherein. Disadvantageously, G.8032 being only applicable to IEEE 802.1Qor amendments thereof is limiting the application of protectionswitching to other bearer traffic technologies.

BRIEF SUMMARY OF THE INVENTION

In an exemplary embodiment, a method for ring protection switching in anetwork based on selectively blocking and unblocking a port includesforwarding traffic via the port over a data channel that utilizes afirst service identifier, wherein the data channel is routed in thenetwork along a closed loop; and selectively blocking and unblockingtraffic on the port to provide the ring protection switching over theclosed loop, wherein the selectively blocking and unblocking isperformed based on a management channel that utilizes a second serviceidentifier that is a different type from the first service identifier.The forwarding traffic and the selectively blocking and unblockingtraffic can be independent actions with associated entities configuredto perform the forwarding traffic and the selectively blocking andunblocking traffic being decoupled from one another. The first serviceidentifier is not a Virtual Local Area Network (VLAN) Identifier (VID)and a Destination Media Access Control (MAC DA). The second serviceidentifier can be an Ethernet service identifier, and the first serviceidentifier is not an Ethernet service identifier. The first serviceidentifier can be a Time Division Multiplexing (TDM) bearer trafficidentifier, and wherein the selectively blocking and unblocking trafficis performed in a switch fabric. The data channel can be a wavelength,and wherein the selectively blocking and unblocking traffic is performedby an optical routing device. The selectively blocking and unblockingtraffic is performed responsive to detecting a fault in the managementchannel.

In another exemplary embodiment, an apparatus configured to perform ringprotection switching in a network based on selectively blocking andunblocking a port includes circuitry adapted to forward traffic via theport over a data channel that utilizes a first service identifier,wherein the data channel is routed in the network along a closed loop;and circuitry adapted to selectively block and unblock traffic on theport to provide the ring protection switching over the closed loop,wherein the traffic is selectively blocked and unblocked based on amanagement channel that utilizes a second service identifier that is adifferent type from the first service identifier. The forward of thetraffic and the block and unblock of the traffic are independent actionswith associated entities configured to perform the independent actionsbeing decoupled from one another. The first service identifier is not aVirtual Local Area Network (VLAN) Identifier (VID) and a DestinationMedia Access Control (MAC DA). The second service identifier can be anEthernet service identifier, and the first service identifier is not anEthernet service identifier. The first service identifier can be a TimeDivision Multiplexing (TDM) bearer traffic identifier, and wherein thetraffic is selectively blocked and unblocked in a switch fabric. Thedata channel can be a wavelength, and wherein the traffic is selectivelyblocked and unblocked by an optical routing device. The traffic isselectively blocked and unblocked responsive to detecting a fault in themanagement channel.

In a further exemplary embodiment, a node configured to perform ringprotection switching in a network based on selectively blocking andunblocking a port includes at least one port adapted to forward trafficover a data channel that utilizes a first service identifier, whereinthe data channel is routed in the network along a closed loop; and adevice adapted to selectively block and unblock traffic on the port toprovide the ring protection switching over the closed loop, wherein thetraffic is selectively blocked and unblocked based on a managementchannel that utilizes a second service identifier that is a differenttype from the first service identifier. The forward of the traffic andthe block and unblock of the traffic are independent actions withassociated entities configured to perform the independent actions beingdecoupled from one another. The first service identifier is not aVirtual Local Area Network (VLAN) Identifier (VID) and a DestinationMedia Access Control (MAC DA). The second service identifier can be anEthernet service identifier, and the first service identifier is not anEthernet service identifier. The first service identifier can be a TimeDivision Multiplexing (TDM) bearer traffic identifier, and wherein thetraffic is selectively blocked and unblocked in a switch fabric. Thedata channel can be a wavelength, and wherein the traffic is selectivelyblocked and unblocked by an optical routing device.

In an exemplary embodiment, a node includes a first port configured tobe selectively blocked and unblocked; a second port configured to beselectively blocked and unblocked; a forwarder between the first portand the second port; a management channel between the first port and thesecond port, wherein the selective blocking and unblocking of the firstport and the second port is based on the management channel; and a datachannel between the first port and the second port, wherein the datachannel utilizes an arbitrary service identifier. The forwarder caninclude circuitry configured to forward bearer traffic on the datachannel based on Ethernet forwarding logic. The forwarder can includecircuitry or an optical device configured to forward bearer traffic onthe data channel utilizing a non-learning forwarding paradigm. Thearbitrary service identifier can be different from a service identifierassociated with the management channel. The arbitrary service identifiercan include any of Provider Backbone Bridging Backbone Service InstanceIdentifier (PBB I-SID), Ethernet Virtual Local Area Network (VLAN)identifier and/or tag priority bits, Multiprotocol Label Switching(MPLS) label identifier, Internet Protocol (IP) Differentiated ServicesCode Point (DSCP), EtherType value, Generic Framing Protocol (GFP)protocol identifier (PID), Time Division Multiplexing (TDM) bearertraffic identifiers, Optical Transport Network (OTN) serviceidentifiers, wavelength identifiers, and a combination thereof.

The selective blocking and unblocking of the first port and the secondport can be based on the arbitrary service identifier. The forwarder canbe configured to forward traffic on both the management channel and thedata channel based on a plurality of arbitrary service identifiers. Theforwarder can be configured with a virtual forwarding instance perarbitrary service identifier. The virtual forwarding instance canconform to an IEEE 802.1Q forwarding process. The node can furtherinclude circuitry to detect a failure associated with one of theplurality of arbitrary service identifiers based on monitoring themanagement channel; wherein the virtual forwarding instance isconfigured to remove forwarding entries associated with the one of theplurality of arbitrary service identifiers upon detection of thefailure. The virtual forwarding instance can be configured to relearnforwarding entries associated with the one of the plurality of arbitraryservice identifiers upon the removal of the forwarding entries. Theforwarder can be configured with a non-learning based forwarding systemthat forwards data between the first port and the second port based onpredetermined rules. The forwarder can include one of an optical routingdevice, an electrical Time Division Multiplexing (TDM) switch fabric anda packet switch where learning is disabled effectively resulting in allreceived frames being forwarded out all associated egress ports. Thedata channel and the management channel can be separated therebetweeninto different instances of a same service identifier name space. Thedata channel and the management channel can be separated therebetweeninto different service identifier name spaces. The node can operateEthernet Ring Protection Switching with the data channel utilizing adifferent service identifier than the management channel.

In another exemplary embodiment, a network includes a plurality ofinterconnected nodes forming one of a logical ring and a physical ring;a first virtual ring on the plurality of interconnected nodes, whereinthe first virtual ring includes a bearer channel and a ring automaticprotection switching (R-APS) channel, and wherein the bearer channel andthe R-APS channel each use a different service identifier space; and afirst selectively enabled channel block on the first virtual ring;wherein each of the plurality of interconnected nodes include aforwarding mechanism, and wherein the forwarding mechanism isindependent of the first selectively enabled channel block.

In yet another exemplary embodiment, a method includes operating a ringwith Ring Protection Switching including a forwarding mechanism and ablocking mechanism that are independent and decoupled entitiestherebetween, wherein the ring includes a management channel and a datachannel that each utilize an arbitrary service identifier; detecting afailure affect a ring span; installing channel blocks adjacent to thefailure; transmitting fault indication messages on the ring; uponreceiving the fault indication messages, removing any channel blocks onthe ring besides the channel blocks adjacent to the failure.

BRIEF DESCRIPTION OF THE DRAWING(S)

Exemplary and non-limiting embodiments of the present disclosure areillustrated and described herein with reference to various drawings, inwhich like reference numbers denote like method steps and/or systemcomponents, respectively, and in which:

FIG. 1 is a network diagram of a network of nodes for illustration ofEthernet Ring Protection Switching, such as G.8032;

FIGS. 2A and 2B are network diagrams of a logical ring of nodes in anetwork and an associated virtual ring thereon;

FIGS. 3A and 3B are network diagrams of a ring of nodes depictingchannel blocks thereon;

FIG. 4 is a network diagram of the ring of FIGS. 3A and 3B showing afailure sequence using G.8032 Ethernet Ring Protection Switching;

FIG. 5 is a network diagram of the ring of FIGS. 3A and 3B showing arecovery sequence using G.8032 Ethernet Ring Protection Switching;

FIGS. 6A and 6B are network diagrams of the ring of FIGS. 3A and 3Bshowing G.8032 like Ring Protection with a generalized/arbitraryidentification space and forwarding based on IEEE 802.1Q bridging;

FIG. 7 is a block diagram of functions associated with the ring node forthe generalized/arbitrary identification space and forwarding based onIEEE 802.1Q bridging;

FIG. 8 is a network diagram of the ring of FIGS. 3A and 3B showing afailure sequence using G.8032 Ethernet Ring Protection Switching withthe generalized/arbitrary identification space and forwarding based onIEEE 802.1Q bridging;

FIG. 9 is a network diagram of the ring of FIGS. 3A and 3B showing arecovery sequence using G.8032 Ethernet Ring Protection Switching withthe generalized/arbitrary identification space and forwarding based onIEEE 802.1Q bridging;

FIGS. 10A and 10B are network diagrams the ring of FIGS. 3A and 3Bshowing G.8032 like Ring Protection with a generalized/arbitraryidentification space and forwarding based on a “non-learning” forwardingparadigm;

FIG. 11 is a block diagram of functions associated with the ring nodefor the generalized/arbitrary identification space and forwarding basedon a “non-learning” forwarding paradigm;

FIG. 12 is a network diagram of the ring of FIGS. 3A and 3B showing afailure sequence using G.8032 Ethernet Ring Protection Switching withthe generalized/arbitrary identification space and forwarding based on a“non-learning” forwarding paradigm;

FIG. 13 is a network diagram of the ring of FIGS. 3A and 3B showing arecovery sequence using G.8032 Ethernet Ring Protection Switching withthe generalized/arbitrary identification space and forwarding based on a“non-learning” forwarding paradigm;

FIGS. 14A and 14B are network diagrams the ring of FIGS. 3A and 3B withG.8032 like Ring Protection with the “non-learning” forwarding paradigmutilizing Ethernet service identifiers;

FIG. 15 is a network diagram of the ring of FIGS. 3A and 3B showing theuse of generalized/arbitrary identification space to the data andmanagement channels, plus learning and non-learning forwarding, plusmultiple sets of virtual rings all over the same logical ring;

FIG. 16 is a block diagram illustrates an exemplary implementation of anode for use in the various rings; and

FIG. 17 is a block diagram illustrates another exemplary implementationof a node for use in the various rings.

DETAILED DESCRIPTION OF THE INVENTION

In various exemplary embodiments, generalized service protection systemsand methods are disclosed enabling aspects of the G.8032 controlprotection protocol to be applied to other bearer plane technologies,such as, but not limited to, Multiprotocol Label Switching (MPLS),Optical Transport Network (OTN), Time Division Multiplexing (TDM),Internet Protocol (IP), etc. That is, the generalized service protectionsystems and methods support variants to the G.8032 protocol for serviceidentifiers in an arbitrary address space (e.g., MPLS labels, IPDifferentiated Services Code Point (DSCP), EtherTypes, OTN serviceidentifiers, TDM bearer traffic identifiers, etc.). The generalizedservice protection systems and methods allow systems and methods similarto the G.8032 protocol to be applied to bearer traffic based on OTNtraffic, SONET/SDH traffic, MPLS traffic, IP traffic, etc. That is,generally any traffic based on non-VID space identifiers. Variousprotection switching performance attributes of G.8032 (e.g., sub-50 msprotection switching) applied to these arbitrary bearer traffic typesare retained. Thus, the generalized service protection systems andmethods extend/abstract the G.8032 protocol to provideblocking/unblocking of bearer traffic on a ring (i.e., physical orlogical) using an arbitrary service address space.

Referring to FIG. 1, in an exemplary embodiment, a network diagramillustrates a network 10 of nodes 12 (labeled 12-1 to 12-N) forillustration of Ethernet Ring Protection Switching, such as G.8032. ForEthernet Ring Protection Switching, the nodes 12 can be either logicallyor physically arranged in a ring. That is, Ethernet Ring ProtectionSwitching requires a closed loop. In an exemplary embodiment, the nodes12 can be physically interconnected to one another via links 14 in aring. In another exemplary embodiment, the nodes 12 can be physicallyconnected via links 14 in a mesh network with the particular nodes 12-1to 12-N selected to form a closed loop network topology in the meshnetwork. In the example of FIG. 1, the node 12-1 is illustrated indetail to show various components of the nodes 12. Specifically, eachnode 12 can include a pair of MAC interfaces 16, a bridge relay 18, anda control entity 20. The MAC interfaces 16 can be compliant to IEEE802.3, and generally provide Layer 2 physical interfaces for the network10. The bridge relay 18 can be compliant to IEEE 802.1Q, and the controlentity 20 can be compliant to G.8032. The control entity 20 is used toallow the nodes 12 to exchange forwarding information and other controlinformation therebetween, as well as to control how a data plane handlesthe data on the network 10. For example, the control entity 20 enablesthe nodes 12 to participate in a spanning tree. Of note, the MACinterfaces 16, the bridge relay 18, and the control entity 20 caninclude hardware, software, and/or firmware for implementing variousfunctions described herein. That is, the MAC interfaces 16, the bridgerelay 18, and the control entity 20 cooperatively operate forimplementation of Ethernet Ring Protection Switching on the network 10.

Ethernet Ring Protection Switching forms an active ring topology in thenetwork 10 by dynamic and managed the configuration of forwarding tableentries at each of the nodes 12, such as through the control entity 20and/or the bridge relay 18. Ethernet Ring Protection Switching includesa control protocol (e.g., G.8032 ring automatic protection switching(R-APS) Protocol Data Units (PDUs)). The PDUs are persistentlytransmitted over the network 10 to convey ring status/state and controlring port blocking/unblocking to facilitate loop prevention andprotection switching thereon. From a standards perspective, IEEE 802.3MAC can be used at Layer 2, IEEE 802.1Q and amendment (e.g., 802.1ad,802.1ah) for bridging of traffic, and Operations, Administration, andMaintenance (OAM) frames (e.g., IEEE 802.1ag “Connectivity FaultManagement” (September 2007), ITU-T Y.1731, etc.) to control the network10. Each of the nodes 12 forwards traffic based upon standard 802.1Qforwarding logic (based on VID/MAC) that is (somewhat) independent ofprotection switching mechanism. Specifically, this forwarding can bebased on VLAN tags. This forwarding can be performed by the bridge relay18.

By virtue of the nodes 12 being interconnected in a closed looparchitecture, the nodes 12 can be allowed to collectively run a separatecontrol plane to control how data is passed between the nodes 12 on thering. The control plane on the closed loop selects one of the nodes 12to be a root node to provide for blocking of traffic flowing on thering. This prevents traffic from endlessly looping on the ring.Additionally, the control plane provides for failure detection on theclosed loop, notification of the failure to the nodes 12 on the closedloop, and how connectivity can be restored to enable the closed loop torecover from failure. One aspect of the control protocol is that, uponfailure in the closed loop, a fault indication message is transmitted onthe ring. The fault indication message, amongst other things, causes thebridging nodes 12 on the ring to flush their forwarding databasesassociated with the ring so that the nodes can re-learn MAC addresses onthe ring. In the network 10, protection switching and loop preventionare supported via port blocking/unblocking functions and active ringtopology discovery/rediscovery functions. Note, active ring topologydiscovery/rediscovery may be supported by forwarding database learning,forwarding, and entry cleansing procedures. The network 10 also includesmonitoring of the ring server layer (e.g., physical layer) to discoverySignal Failure (SF) conditions to trigger protection switching providingprotection and recovery switching within 50 ms.

Referring to FIGS. 2A and 2B, in an exemplary embodiment, networkdiagrams illustrate a logical ring 30 of nodes 12-1 through 12-6 in anetwork 32 and an associated virtual ring 34 thereon. A ring is alogical construct that forms a closed loop over a physical networkinfrastructure, i.e. any network that provides resiliency havingdiversely routed paths between two endpoints, thus forming a closedloop. In FIG. 1, the nodes 12 are in a ring configuration. Further, thering may be agnostic to the client and server layer. The logical ring 30utilizes a forwarding paradigm of service/client traffic over the ring.The logical ring 30 is a closed loop created over a physical networkinfrastructure. The connections between adjacent ring nodes 12 (i.e.,ring spans 36) provide a point-to-point connection between the adjacentring nodes 12. Note, the ring spans 36 associated with the ring 30 neednot be the same bandwidth nor server layer technology. The virtual ring34 includes two channels 38, 40 and is associated with the logical ring30. The channel 38 can include a Ring Automatic Protection Switching(R-APS) channel used for transport of ring control PDUs over the rings30, 34, and the channel 40 can include a service data channel (alsoreferred to as a bearer channel) used for transport of client datatraffic over the rings 30, 34. That is, the channel 38 is used formanagement and can be referred to as a management channel, and thechannel 40 is used for data and can be referred to as a data channel.

Referring to FIGS. 3A and 3B, in an exemplary embodiment, networkdiagrams illustrate a ring 50 of nodes 12 depicting channel blocks 52.In G.8032, the channel block 52 prevents service traffic from beingrelayed/forwarded between [ring or client] ports. Note, the channelblock 52 operates on the channels 38, 40 from FIG. 2B, for example. Thechannel block 52 function prevents traffic from being forwarded by theRx ring port, e.g., by the MAC interfaces 16. However, the channel block52 does not prevent traffic from being received by Higher Layer Entities(e.g., the control entity 20) on that node 12. The following channelblock 52 rules should be applied, namely 1) each channel must have atleast a [single] channel block 52 installed (at all times), and 2) thelocation of the “provisioned” channel block 52 (associated with the RingProtection Link) can be manually determined or auto-discovered by achannel block discovery protocol. FIG. 3B illustrates two virtual rings34A, 34B on the ring 50 in an overlapping fashion. That is, each of thevirtual rings 34A, 34B has a separate service identifier and channelblocks 52A. 52B. Note, the channel blocks 52A, 52B could be collocated.In operation, a service data channel 40 for each of the virtual rings34A, 34B transports a collection of [client] traffic flows over the ring50 that share a provisioned channel block 52A, 52B. Note, it is assumedthat each client traffic flow has a unique identifier associated withit.

Referring to FIG. 4, in an exemplary embodiment, the ring 50 with nodes12 is illustrated showing a failure sequence using G.8032 Ethernet RingProtection Switching. At a first point 61 in FIG. 4, the ring 50 isoperating under a normal configuration, i.e., no failures. In thisexample, the channel block 52 is at the node 12A facing the node 12B. Ata point 62, a failure occurs on a ring span between the nodes 12E, 12D.At a point 63, a signal failure (SF) is detected on the ring, portblocking is applied at the nodes 12E, 12D via channel blocks 52, andR-APS Failure Indication Messages (FIM) are transmitted over themanagement channel. At a point 64, each of the nodes 12 will receive theR-APS FIM and flush their current Forwarding Database (FDB) and thechannel block 52 will be removed at the node 12A upon receipt of theR-APS FIM. The FDB includes information which contains the routingconfiguration from the point of view of the current node 12. UnderG.8032, general protocol guidelines used to support protection switchingwithin 50 ms are 1) Time for a R-APS message to circulate an entire ring(i.e., ring circumference and nodal transit delays) should be 10 ms, 2)Time taken to install channel blocks should be 15 ms, 3) Time taken tocleanse stale entries found in the FDB associated with Ring should be 10ms, and 4) Time taken to remove channel blocks should be 15 ms.

Referring to FIG. 5, in an exemplary embodiment, the ring 50 isillustrated showing a recovery sequence using G.8032 Ethernet RingProtection Switching on the nodes 12. The recovery sequence includes arecovery from the failure illustrated in FIG. 4 between the nodes 12D,12E. At a point 71, a ring span recovery is detected between the nodes12D, 12E and R-APS Recovery Indication Messages (RIM) are transmittedalong with guard timers started at the nodes 12D, 12E. At a point 72,when a root port node receives the R-APS RIM, a wait-to-restore (WTR)timer is started. At a point 73, when the WTR expires, a Ring ProtectionLink (RPL) port block is installed at the node 12A and R-APS OK messagesare transmitted. Also, each of the nodes 12 flushes their FDB when theR-APS OK messages are received as well as removing port block such as atthe nodes 12D, 12E when the R-APS OK messages are received. Finally, thering 50 is back in a normal operating condition, i.e., back to the point61.

Referring to FIGS. 6A and 6B, in an exemplary embodiment, the ring 50 isillustrated with G.8032 like Ring Protection with ageneralized/arbitrary identification space and forwarding based on IEEE802.1Q bridging. In FIG. 6A, the ring 50 includes virtual channels38A,40A with the channel 38A being a R-APS channel using Ethernetservice identifiers (e.g., VID/MAC DA) and the channel 40A being abearer channel using MPLS label service identifiers. In FIG. 6B, thering 50 includes virtual channels 38B, 40B, 40C with the channel 38Bbeing a R-APS channel using Ethernet service identifiers (e.g., VID/MACDA), the channel 40B being a bearer channel using MPLS label serviceidentifiers, and the channel 40C being a bearer channel using IP (DSCP)service identifiers. The R-APS protocol for bearer channels 40B and 40Cis run on management channel 38B. Thus, in the examples of FIGS. 6A and6B, the R-APS channels 38A, 38B use a different service identifier spacethan the bearer channels 40A, 40B, 40C. Also, note the channels 40A,40B, 40C are illustrated with MPLS label service identifiers and IP(DSCP) service identifiers for illustration purposes, and other serviceidentifiers are also contemplated by the generalized service protectionsystems and methods.

In this exemplary embodiment of a generalized/arbitrary identificationspace and forwarding based on IEEE 802.1Q bridging, the G.8032 protocolcan be abstracted to support the transport and protection of servicetraffic with an arbitrary service identification space. The followingabstractions/modifications are necessary for the generalized serviceprotection systems and methods. First, service and control flows beingtransported over the ring 50 can be identified based upon a uniqueidentifier within the packet. Exemplary unique identifiers can includeProvider Backbone Bridging Backbone Service Instance Identifier (PBBI-SID), Ethernet VLAN identifier and/or tag priority bits, MPLS labelidentifier, IP DSCP, EtherType value, Generic Framing Protocol (GFP)protocol identifier (PID), a combination of the aforementioned, and thelike. Second, the generalized service protection systems and methodssupport blocking/unblocking of bearer and R-APS traffic channels 38A,38B, 40A, 40B, 40C based upon the respective service identifier.

Third, the generalized service protection systems and methods supportforwarding of bearer and R-APS traffic over the ring 50 based uponservice identifier that is possibly different from the serviceidentifier used for blocking/unblocking. For example, a virtualforwarding instance (VFI) is created per service identifier (grouping),and each VFI conforms to an IEEE 802.1Q forwarding process. Fourth, thegeneralized service protection systems and methods supportcleansing/removal of forwarding entries associated with a VFI associatedwith the service identifier. Fifth, the generalized service protectionsystems and methods support initiation of relearning of forwardingentries associated with a VFI associated with the service identifier.Sixth, the generalized service protection systems and methods supportseparation of the bearer and R-APS traffic into different instances ofthe same service identifier name space, or different service identifiername spaces.

Referring to FIG. 7, in an exemplary embodiment, block diagramsillustrate functions associated with the ring node 12 for thegeneralized/arbitrary identification space and forwarding based on IEEE802.1Q bridging. In this exemplary embodiment, the forwarding paradigmused and the blocking that is done are independent actions and entitiesand are decoupled. Each of the nodes 12 can be represented by a firstport 100, a forwarding process 102, and a second port 104. The ports100, 104 ingress and egress frames on the ring 50, and the forwardingprocess 102 communicatively couples the ports 100, 104 therebetween.While illustrated conceptually, those of ordinary skill in the art willrecognize the ports 100, 104 and the forwarding process 102 eachincludes hardware, software, and/or firmware for implementing theirassociated functions. The forwarding process 102 is configured toforward service traffic on the ring 50, such as over the channels 40A,40B, 40C, using the VFI. Each of the ports 100, 104 includes the channelblock 52 functionality described herein. Channel unblocking is providedby allowing traffic to ingress the forwarding process 102 or egress fromthe forwarding process 102 (associated with the virtual ring). Channelblocking is provided by preventing traffic from ingress to theforwarding process 102 or egress from the forwarding process 102(associated with the virtual ring). Of note, the blocking/unblocking hasno impact to the forwarding process 102.

Referring to FIG. 8, in an exemplary embodiment, the ring 50 with nodes12 is illustrated showing a failure sequence using G.8032 Ethernet RingProtection Switching with the generalized/arbitrary identification spaceand forwarding based on IEEE 802.1Q bridging. At a first point 121 inFIG. 8, the ring 50 is operating under a normal configuration, i.e. nofailures. In this example, the channel block 52 is at the node 12Afacing the node 12B. As discussed herein, in the exemplary embodiment,the traffic is routed on bearer channels based on a first serviceidentifier, and the R-APS channel on a second service identifier.Blocking occurs on both channels at the same location on the ring. At apoint 122, a failure occurs on a ring span between the nodes 12E, 12D,detected via the R-APS channel. At a point 123, a signal failure (SF) isdetected on the ring, a channel block is installed adjacent to thefailure between the nodes 12E, 12D, and R-APS Failure IndicationMessages (FIM) are transmitted from the nodes 12E, 12D. At a point 124,each of the nodes 12 will receive the R-APS FIM and cleanse theirforwarding entries associated with the services within the virtual ring,and initiate repopulation of the forwarding entries based upon a newring topology. Specifically, the node 12A is configured to remove itschannel block upon receipt of the R-APS FIM. The forwarding entries arebased on the forwarding process 102 at each of the nodes. Under G.8032,general protocol guidelines used to support protection switching within50 ms are 1) Time for a R-APS message to circulate an entire ring (i.e.,ring circumference and nodal transit delays) should be 10 ms, 2) Timetaken to install channel blocks should be ≦15 ms, 3) Time taken tocleanse stale entries found in the FDB associated with Ring should be≦10 ms, and 4) Time taken to remove channel blocks should be 15 ms.

Referring to FIG. 9, in an exemplary embodiment, the ring 50 with nodes12 is illustrated showing a recovery sequence using G.8032 Ethernet RingProtection Switching with the generalized/arbitrary identification spaceand forwarding based on IEEE 802.1Q bridging. The recovery sequenceincludes a recovery from the failure illustrated in FIG. 8 between thenodes 12D, 12E. At a point 131, a ring span recovery is detected betweenthe nodes 12D, 12E and R-APS Recovery Indication Messages (RIM) aretransmitted along with guard timers started at the nodes 12D, 12E. At apoint 132, when a root port node receives the R-APS RIM, await-to-restore (WTR) timer is started. At a point 133, when the WTRexpires, a RPL port block is installed at the nodes 12A and R-APS OKmessages are transmitted. Also, each of the nodes 12 cleanses forwardingentries associated with services within the virtual ring and initiatere-population of forwarding entries based upon new ring topology whenthe R-APS OK messages are received. The nodes 12E, 12D remove thechannel blocks also when the R-APS OK messages are received. Finally,the ring 50 is back in a normal operating condition, i.e., back to thepoint 121.

Referring to FIGS. 10A and 10B, in an exemplary embodiment, the ring 50is illustrated with G.8032 like Ring Protection with ageneralized/arbitrary identification space and forwarding based on a“non-learning” forwarding paradigm. In FIG. 10A, the ring 50 includesvirtual channels 38D, 40D with the channel 38D being a R-APS channelusing Ethernet service identifiers (e.g., VID/MAC DA) and the channel40D being a bearer channel using OTN service identifiers, i.e., a bearerchannel over an OTN ring. In FIG. 10B, the ring 50 includes virtualchannels 38E, 40E, 40F with the channel 38E being a R-APS channel usingEthernet service identifiers (e.g., VID/MAC DA), the channel 40E being abearer channel using OTN service identifiers, and the channel 40F beinga bearer channel using GFP PID service identifiers. The R-APS protocolfor bearer channels 40E and 40F is run on management channel 38E. Thus,in the examples of FIGS. 10A and 10B, the R-APS channels 38D, 38E use adifferent service identifier space than the bearer channels 40D, 40E,40F. Also, note the channels 40D, 40E, 40F are illustrated with OTNservice identifiers and GFP PID service identifiers for illustrationpurposes, and other service identifiers are also contemplated by thegeneralized service protection systems and methods.

The following abstractions/modifications are necessary for thegeneralized service protection systems and methods with forwarding basedon a “non-learning” forwarding paradigm. First, service flows beingtransported over the ring 50 can be identified based upon any uniqueidentifier. Exemplary unique identifiers can include PBB I-SID, EthernetVLAN tag priority bits, MPLS label identifier, IP DSCP, EtherType value,GFP PID, a wavelength identifier, a combination of the aforementioned,and the like. Second, the generalized service protection systems andmethods support blocking/unblocking of bearer and R-APS traffic channelbased upon service identifier. Third, the generalized service protectionsystems and methods support forwarding of bearer and R-APS traffic overthe ring based upon service identifier. Fourth, the generalized serviceprotection systems and methods support separation of bearer and R-APStraffic into different instances of the same service identifier namespace, or different service identifier name spaces.

Referring to FIG. 11, in an exemplary embodiment, block diagramsillustrate functions associated with the ring node 12 for thegeneralized/arbitrary identification space and forwarding based on a“non-learning” forwarding paradigm. In this exemplary embodiment, theforwarding paradigm used and the blocking that is done are independentactions and entities and are decoupled. Each of the nodes 12 can berepresented by a first port 150, a forwarder 152, and a second port 154.The forwarder 152 can be anything that forwards traffic between theports 150, 152. For example, the forwarder 152 can be an opticalswitching device, an electrical TDM switch fabric, a packet switchfabric, etc. The ports 150, 154 ingress and egress traffic on the ring50, and the forwarder 152 communicatively couples the ports 150, 154therebetween. While illustrated conceptually, those of ordinary skill inthe art will recognize the ports 150, 154 and forwarder 152 eachincludes hardware, software, and/or firmware for implementing theirassociated functions. Each of the ports 150, 154 includes the channelblock functionality described herein. Channel unblocking is provided byallowing traffic to ingress the forwarder 152 or egress from theforwarder 152 (associated with the virtual ring). Channel blocking isprovided by preventing traffic from ingress to the forwarder 152 oregress from the forwarder 152 (associated with the virtual ring). Note,the channel block 52 can be different depending on the bearer traffic.For example, for wavelengths, the channel block 52 can be a variableoptical attenuator (VOA), wavelength blocker, etc. For TDM traffic, thechannel block 52 can be settings in a switch fabric to terminate a TDMflow, etc.

In this exemplary embodiment of a generalized/arbitrary identificationspace and forwarding based on a “non-learning” forwarding paradigm, theG.8032 protocol can be abstracted to support the transport andprotection of service traffic with an arbitrary service identificationspace. As described herein the “non-learning” forwarding paradigm caninclude an optical splitter, electrical TDM, a packet switch withlearning disabled, and the like. Each of the foregoing has forwardingbased that is non-learning in an Ethernet sense. For example, the packetswitch with learning disabled effectively results in all received framesbeing forwarded out all egress ports associated with a service, orforwarding is configured to send packets to specific ports depending onthe value of the service identifier. Similarly, an optical splittersends all traffic split out over the output ports, an electrical TDMswitch sends all traffic in connection out its egress, and the like.Non-learning can mean data is forwarded based on predetermined rules,i.e., the rules are fixed and not adjusted or learned over time.Specifically, the forwarder 152 can be configured to route, switch,send, etc. traffic between the ports 150, 154 based on the predeterminedrules.

Referring to FIG. 12, in an exemplary embodiment, the ring 50 with nodes12 is illustrated showing a failure sequence using G.8032 Ethernet RingProtection Switching with the generalized/arbitrary identification spaceand forwarding based on a “non-learning” forwarding paradigm. At a firstpoint 161 in FIG. 12, the ring 50 is operating under a normalconfiguration, i.e., no failures. In this example, the channel block 52is at the node 12A facing the node 12B. As discussed herein, in theexemplary embodiment, the traffic is routed on bearer channels based ona first service identifier, and the R-APS channel on a second serviceidentifier. Blocking occurs on both channels at the same location on thering. At a point 162, a failure occurs on a ring span between the nodes12E, 12D, detected via the R-APS channel. At a point 163, a signalfailure (SF) is detected on the ring, a channel block is installedadjacent to the failure between the nodes 12E, 12D, and R-APS FailureIndication Messages (FIM) are transmitted from the nodes 12E, 12D. At apoint 124, each of the nodes 12 will receive the R-APS FIM, and the node12A is configured to remove its channel block upon receipt of the R-APSFIM. In this exemplary embodiment, there is no relearning since theforwarder 152 is simply forwarding traffic.

In an exemplary embodiment, the forwarding based on a “non-learning”forwarding paradigm can be described as an all-broadcast system whereeach node 12 is configured to broadcast everything received on one port150 to the second port 154. The channel block 52 is meant to prevent aloop in the ring 50. That is, the all-broadcast system cannot have aloop because it will cause traffic to interfere if it loops back uponitself, i.e. whether the traffic is optical wavelengths, TDM frames, orpackets. Thus, this exemplary embodiment can be viewed as placing andremoving the channel block based on failures to enable recovery. Thatis, the activity in this exemplary embodiment is focused on the ports150, 154, and not on the forwarder 152. The forwarder 152 does not haveto flush or cleanse forwarding databases. Rather, the forwarder 152works per normal operation under all circumstances with the channelblocks 52 being used to provide the Ring Protection Switching.

Referring to FIG. 13, in an exemplary embodiment, the ring 50 with nodes12 is illustrated showing a recovery sequence using G.8032 Ethernet RingProtection Switching with the generalized/arbitrary identification spaceand forwarding based on a “non-learning” forwarding paradigm. Therecovery sequence includes a recovery from the failure illustrated inFIG. 12 between the nodes 12D, 12E. At a point 171, a ring span recoveryis detected between the nodes 12D, 12E and R-APS Recovery IndicationMessages (RIM) are transmitted along with guard timers started at thenodes 12D, 12E. At a point 172, when a root port node receives the R-APSRIM, a wait-to-restore (WTR) timer is started. At a point 173, when theWTR expires, a RPL port block is installed at the nodes 12A and R-APS OKmessages are transmitted. The nodes 12E, 12D are configured to removetheir channel blocks upon receipt of the R-APS OK messages. Finally, thering 50 is back in a normal operating condition, i.e., back to the point161.

Referring to FIGS. 14A and 14B, in exemplary embodiments, the ring 50 isillustrated with G.8032 like Ring Protection with the “non-learning”forwarding paradigm utilizing Ethernet service identifiers. FIG. 14Billustrates an exemplary embodiment of the non-learning forwarding thatalso includes the use of Ethernet service identifiers (MAC+VID) for botha data channel and its R-APS management channel. Multiple of suchdata/management ring pairs can exist over the same logical ringtopology. Multiple data channels, each using Ethernet serviceidentifiers (MAC+VID) can be supported over the same logical ring withone R-APS management channel also using Ethernet service identifiers(MAC+VID), with non-learning forwarding for all virtual rings, as isillustrated in FIG. 14B.

Referring to FIG. 15, in an exemplary embodiment, the ring 50 isillustrated combining the use of generalized/arbitrary identificationspace to the data and management channels, plus learning andnon-learning forwarding, plus multiple sets of virtual rings all overthe same logical ring. Here, three sets of virtual rings, each withtheir own R-APS management channel are configured over the same logicalring of nodes 12. Virtual rings 40K and 38G show service identificationspaces that are not MAC+VID (as in G.8032) and are in a 1:1management:data channel relationship. Virtual rings 40L, 40M and 38Hshow service identification spaces that are not MAC+VID (as in G.8032)and are in a 1:n management:data channel relationship. Virtual rings 40Nand 40P show a mix of learning and non-learning forwarding while sharingthe same R-APS management channel 38J.

Referring to FIG. 16, in an exemplary embodiment, a block diagramillustrates an exemplary implementation of the node 12A. In thisexemplary embodiment, the node 12A is an Ethernet network switch, butthose of ordinary skill in the art will recognize the generalizedservice protection systems and methods, contemplate other types ofnetwork elements and other implementations. For example, the Ethernetnetwork switch can be used with the G.8032 like Ring Protection with ageneralized/arbitrary identification space and forwarding based on IEEE802.1Q bridging. In this exemplary embodiment, the node 12A includes aplurality of blades 302, 304 interconnected via an interface 306. Theblades 302, 304 are also known as line cards, line modules, circuitpacks, pluggable modules, etc. and generally refer to components mountedwithin a chassis, shelf, etc. of a data switching device, i.e., the node12A. In another exemplary embodiment, the functionality of each of theblades 302, 304 can be integrated within a single module, such as in thelayer two switch integrated within an optical network element. Each ofthe blades 302, 304 can include numerous electronic devices and opticaldevices mounted on a circuit board along with various interconnectsincluding interfaces to the chassis, shelf, etc.

Two exemplary blades are illustrated with line blades 302 and controlblades 304. The line blades 302 generally include data ports 308 such asa plurality of Ethernet ports. For example, the line blade 302 caninclude a plurality of physical ports disposed on an exterior of theblade 302 for receiving ingress/egress connections. Additionally, theline blades 302 can include switching components to form a switchingfabric via the backplane 306 between all of the data ports 308 allowingdata traffic to be switched between the data ports 308 on the variousline blades 302. The switching fabric is a combination of hardware,software, firmware, etc. that moves data coming into the node 12A out bythe correct port 308 to the next node 12. “Switching fabric” includesswitching units, or individual boxes, in a node; integrated circuitscontained in the switching units; and programming that allows switchingpaths to be controlled. Note, the switching fabric can be distributed onthe blades 302, 304, in a separate blade (not shown), or a combinationthereof.

Within the context of the generalized service protection systems andmethods, the control blades 304 include a microprocessor 310, memory312, software 314, and a network interface 316. Specifically, themicroprocessor 310, the memory 312, and the software 314 cancollectively control, configure, provision, monitor, etc. the node 12A.The network interface 316 may be utilized to communicate with an elementmanager, a network management system, etc. Additionally, the controlblades 304 can include a database 320 that tracks and maintainsprovisioning, configuration, operational data and the like. The database320 can include a forwarding database (FDB) 322 that is adjusted asdescribed herein. In this exemplary embodiment, the node 12A includestwo control blades 304 which may operate in a redundant or protectedconfiguration such as 1:1, 1+1, etc. In general, the control blades 304maintain dynamic system information including Layer two forwardingdatabases, protocol state machines, and the operational status of theports 308 within the network element 12A. In an exemplary embodiment,the blades 302, 304 are configured to implement a G.8032 ring, such asthe ring 50, and to implement the various processes, algorithms,methods, mechanisms, etc. described herein for implementing G.8032 likeRing Protection with a generalized/arbitrary identification space andforwarding based on IEEE 802.1Q bridging or forwarding based on a“non-learning” forwarding paradigm.

Referring to FIG. 17, in an exemplary embodiment, a block diagramillustrates an exemplary implementation of the node 12B. For example,the node 12B can be used with the G.8032 like Ring Protection with ageneralized/arbitrary identification space and forwarding based on a“non-learning” forwarding paradigm. In an exemplary embodiment, the node12B can be a nodal device that may consolidate the functionality of amulti-service provisioning platform (MSPP), digital cross-connect (DCS),Ethernet and Optical Transport Network (OTN) switch, dense wave divisionmultiplexed (DWDM) platform, etc. into a single, high-capacityintelligent switching system providing Layer 0, 1, and 2 consolidation.In another exemplary embodiment, the node 12B can be any of an OTNadd/drop multiplexer (ADM), a SONET/SDH ADM, a multi-serviceprovisioning platform (MSPP), a digital cross-connect (DCS), an opticalcross-connect, an optical switch, a router, a switch, a WDM terminal, anaccess/aggregation device, a private branch exchange (PBX), etc. Thatis, the node 12B can be any system with ingress and egress signals andswitching therebetween of channels, timeslots, tributary units,wavelengths, etc. While the node 12B is generally shown as an opticalnetwork element, the generalized service protection systems and methodsare contemplated for use with any switching fabric, network element, ornetwork based thereon.

In an exemplary embodiment, the node 12B includes common equipment 310,one or more line modules 320, and one or more switch modules 330. Thecommon equipment 310 can include power; a control module; operations,administration, maintenance, and provisioning (OAM&P) access; and thelike. The common equipment 310 can connect to a management system suchas a network management system (NMS), element management system (EMS),or the like. The node 12B can include an interface 370 forcommunicatively coupling the common equipment 310, the line modules 320,and the switch modules 330 therebetween. For example, the interface 370can be a backplane, midplane, a bus, optical or electrical connectors,or the like. The line modules 320 are configured to provide ingress andegress to the switch modules 330 and external to the node 12B. In anexemplary embodiment, the line modules 320 can form ingress and egressswitches with the switch modules 330 as center stage switches for athree-stage switch, e.g., a three stage Clos switch. The line modules320 can include optical transceivers, such as, for example, 1 Gb/s (GbEPHY), 2.5 Gb/s (OC-48/STM-1, OTU1, ODU1), 10 Gb/s (OC-192/STM-64, OTU2,ODU2, 10 GbE PHY), 40 Gb/s (OC-768/STM-256, OTU3, ODU3, 40 GbE PHY), 100Gb/s (OTU4, ODU4, 100 GbE PHY), etc. The line modules 320 can also beall-optical ports for interface to an all-optical switch module 330.

Further, the line modules 320 can include a plurality of opticalconnections per module and each module may include a flexible ratesupport for any type of connection, such as, for example, 155 Mb/s, 622Mb/s, 1 Gb/s, 2.5 Gb/s, 10 Gb/s, 40 Gb/s, and 100 Gb/s. The line modules320 can include wavelength division multiplexing interfaces, short reachinterfaces, and the like, and can connect to other line modules 320 onremote network elements, end clients, edge routers, and the like. From alogical perspective, the line modules 320 provide ingress and egressports to the node 12B, and each line module 320 can include one or morephysical ports. The switch modules 330 are configured to switchchannels, timeslots, tributary units, wavelengths, etc. between the linemodules 320. For example, the switch modules 330 can provide wavelengthgranularity (Layer 0 switching), SONET/SDH granularity such asSynchronous Transport Signal-1 (STS-1) and variants/concatenationsthereof (STS-n/STS-nc), Synchronous Transport Module level 1 (STM-1) andvariants/concatenations thereof, Virtual Container 3 (VC3), etc.; OTNgranularity such as Optical Channel Data Unit-1 (ODU1), Optical ChannelData Unit-2 (ODU2), Optical Channel Data Unit-3 (ODU3), Optical ChannelData Unit-4 (ODU4), Optical Channel Data Unit-flex (ODUflex), Opticalchannel Payload Virtual Containers (OPVCs), etc.; Ethernet granularity;Digital Signal n (DSn) granularity such as DS0, DS1, DS3, etc.; and thelike. Specifically, the switch modules 330 can include both TimeDivision Multiplexed (TDM) (i.e., circuit switching) and packetswitching engines. The switch modules 330 can include redundancy aswell, such as 1:1, 1:N, etc.

Those of ordinary skill in the art will recognize the nodes 12A, 12B caninclude other components which are omitted for illustration purposes,and that the systems and methods described herein are contemplated foruse with a plurality of different nodes with the nodes 12A, 12Bpresented as an exemplary type of node. For example, in anotherexemplary embodiment, a node may not include the switch modules 330, butrather have the corresponding functionality in the line modules 320 (orsome equivalent) in a distributed fashion. For the nodes 12A, 12B, otherarchitectures providing ingress, egress, and switching therebetween arealso contemplated for the systems and methods described herein. Ingeneral, the systems and methods described herein contemplate use withany node providing switching or forwarding of channels, timeslots,tributary units, wavelengths, etc.

It will be appreciated that some exemplary embodiments described hereinmay include one or more generic or specialized processors (“one or moreprocessors”) such as microprocessors; Central Processing Units (CPUs);Digital Signal Processors (DSPs): customized processors such as NetworkProcessors (NPs) or Network Processing Units (NPUs), Graphics ProcessingUnits (GPUs), or the like; Field Programmable Gate Arrays (FPGAs); andthe like along with unique stored program instructions (including bothsoftware and firmware) for control thereof to implement, in conjunctionwith certain non-processor circuits, some, most, or all of the functionsof the methods and/or systems described herein. Alternatively, some orall functions may be implemented by a state machine that has no storedprogram instructions, or in one or more Application Specific IntegratedCircuits (ASICs), in which each function or some combinations of certainof the functions are implemented as custom logic or circuitry. Ofcourse, a combination of the aforementioned approaches may be used. Forsome of the exemplary embodiments described herein, a correspondingdevice such as hardware, software, firmware, and a combination thereofcan be referred to as “circuitry configured to,” “circuitry adapted to,”“logic configured to,” “logic adapted to,” etc. perform a set ofoperations, steps, methods, processes, algorithms, functions,techniques, etc. as described herein for the various exemplaryembodiments.

Moreover, some exemplary embodiments may include a non-transitorycomputer-readable storage medium having computer readable code storedthereon for programming a computer, server, appliance, device,processor, circuit, etc. each of which may include a processor toperform functions as described and claimed herein. Examples of suchcomputer-readable storage mediums include, but are not limited to, ahard disk, an optical storage device, a magnetic storage device, a ROM(Read Only Memory), a PROM (Programmable Read Only Memory), an EPROM(Erasable Programmable Read Only Memory), an EEPROM (ElectricallyErasable Programmable Read Only Memory), Flash memory, and the like.When stored in the non-transitory computer readable medium, software caninclude instructions executable by a processor or device (e.g., any typeof programmable circuitry or logic) that, in response to such execution,cause a processor or the device to perform a set of operations, steps,methods, processes, algorithms, functions, techniques, etc. as describedherein for the various exemplary embodiments.

Although the present disclosure has been illustrated and describedherein with reference to preferred embodiments and specific examplesthereof, it will be readily apparent to those of ordinary skill in theart that other embodiments and examples may perform similar functionsand/or achieve like results. All such equivalent embodiments andexamples are within the spirit and scope of the present disclosure, arecontemplated thereby, and are intended to be covered by the followingclaims.

What is claimed is:
 1. A method for ring protection switching in anetwork based on selectively blocking and unblocking a port, the methodcomprising: forwarding traffic via the port over a data channel thatutilizes a first service identifier, wherein the data channel is routedin the network along a closed loop; and selectively blocking andunblocking traffic on the port to provide the ring protection switchingover the closed loop, wherein the selectively blocking and unblocking isperformed based on a management channel that utilizes a second serviceidentifier that is a different type from the first service identifier.2. The method of claim 1, wherein the forwarding traffic and theselectively blocking and unblocking traffic are independent actions,with associated entities configured to perform the forwarding trafficand the selectively blocking and unblocking traffic being decoupled fromone another.
 3. The method of claim 1, wherein the first serviceidentifier is not either of a Virtual Local Area Network (VLAN)Identifier (VID) and a Destination Media Access Control (MAC DA).
 4. Themethod of claim 1, wherein the second service identifier is an Ethernetservice identifier and the first service identifier is not an Ethernetservice identifier.
 5. The method of claim 1, wherein the first serviceidentifier is a Time Division Multiplexing (TDM) bearer trafficidentifier, and wherein the selectively blocking and unblocking trafficis performed in a switch fabric.
 6. The method of claim 1, wherein thedata channel is a wavelength, and wherein the selectively blocking andunblocking traffic is performed by an optical routing device.
 7. Themethod of claim 1, wherein the selectively blocking and unblockingtraffic is performed responsive to detecting a fault in the managementchannel.
 8. An apparatus configured to perform ring protection switchingin a network based on selectively blocking and unblocking a port, thenode comprising: circuitry adapted to forward traffic via the port overa data channel that utilizes a first service identifier, wherein thedata channel is routed in the network along a closed loop; and circuitryadapted to selectively block and unblock traffic on the port to providethe ring protection switching over the closed loop, wherein the trafficis selectively blocked and unblocked based on a management channel thatutilizes a second service identifier that is a different type from thefirst service identifier.
 9. The apparatus of claim 8, wherein theforward of the traffic and the block and unblock of the traffic areindependent actions, with the circuitry adapted to forward traffic andthe circuitry adapted to selectively block and unblock traffic beingdecoupled from one another.
 10. The apparatus of claim 8, wherein thefirst service identifier is not either of a Virtual Local Area Network(VLAN) Identifier (VID) and a Destination Media Access Control (MAC DA).11. The apparatus of claim 8, wherein the second service identifier isan Ethernet service identifier and the first service identifier is notan Ethernet service identifier.
 12. The apparatus of claim 8, whereinthe first service identifier is a Time Division Multiplexing (TDM)bearer traffic identifier, and wherein the traffic is selectivelyblocked and unblocked in a switch fabric.
 13. The apparatus of claim 8,wherein the data channel is a wavelength, and wherein the traffic isselectively blocked and unblocked by an optical routing device.
 14. Theapparatus of claim 8, wherein the traffic is selectively blocked andunblocked responsive to detecting a fault in the management channel. 15.A node configured to perform ring protection switching in a networkbased on selectively blocking and unblocking a port, the nodecomprising: at least one port adapted to forward traffic over a datachannel that utilizes a first service identifier, wherein the datachannel is routed in the network along a closed loop; and a deviceadapted to selectively block and unblock traffic on the port to providethe ring protection switching over the closed loop, wherein the trafficis selectively blocked and unblocked based on a management channel thatutilizes a second service identifier that is a different type from thefirst service identifier.
 16. The node of claim 15, wherein the forwardof the traffic and the block and unblock of the traffic are independentactions, with associated entities configured to perform the independentactions being decoupled from one another.
 17. The node of claim 15,wherein the first service identifier is not either of a Virtual LocalArea Network (VLAN) Identifier (VID) and a Destination Media AccessControl (MAC DA).
 18. The node of claim 15, wherein the second serviceidentifier is an Ethernet service identifier and the first serviceidentifier is not an Ethernet service identifier.
 19. The node of claim15, wherein the first service identifier is a Time Division Multiplexing(TDM) bearer traffic identifier, and wherein the traffic is selectivelyblocked and unblocked in a switch fabric.
 20. The node of claim 15,wherein the data channel is a wavelength, and wherein the traffic isselectively blocked and unblocked by an optical routing device.